Digital Forensics

Any data that is stored in memory or exist in transit and  will be lost when the computer is turned off

• Volatile

• Persistent

• Both

• Non of these

Data which is stored on a hard drive or another  medium and is preserved when the computer is turned  off

• Volatile

• Persistent

• Structured data

• all of these

Some forms of digital evidence are

• spreadsheets

• Archive Files

• Deleted Files

• All of these

The information embedded in the file itself  that contains information about the file is called as

• Data

• Meta data

• Information

• Non of these

Space not occupied by an active file, but not  available for use by the operating system is known as

• Slack space

• file space

• digital space

• all of these

A hidden system file that is used  for virtual memory when there is not enough  physical memory to run programs is known as

• swap file

• Memory file

• temporary file

• all of these

The investigation which includes identifying or  locating physical  evidence is known as

• Physical Investigation

• Logical investigation

• digital investigation

• Non of these

This type of investigation includes analyzing file & data in  the system. It requires a  well defined security  policy

• Physical investigation

• Digital investigation

• Logical Investigation

• All of these

A system which contains forensic  toolkits for investigation with dual-bootable  window/Linux installed

• Forensic Server

• Digital Server

• Both of these

• Non of these

Which of these are done at crime scene when you are going for investigation

• Identification

• Collection

• Preservation

• All of these